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(57)Abstract: 

PROBLEM TO BE SOLVED: To provide a virus check 
network with improved efficiency to prevent viruses on a 
network side. 

SOLUTION: A virus pattern housing means 1 1 houses 
virus patterns. A virus check means 2 executes virus 
check whether a packet is an infected packet Pa or not 
based on the virus patterns on the network side. At the 
time of detecting an infected packet Pa, a packet 
transmitting means 13 stands a bit showing infection 
within the packet and transmits it as an infection 
displaying packet Pb. An infected packet detecting 
means 21 detects the infected packet. A file execution 
control means 22 makes a file execution-disable 
corresponding to the infected packet. A virus pattern 
information delivering means 31 delivers virus pattern 
information to virus check devices 10a to 10n by 
multicasting. A virus pattern information managing means 
32 uniformly manages virus pattern information. 
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5 [0013] 

[Modes for carrying out the invention] Exemplary 
embodiments of the present invention are explained below 
with reference to the accompanying drawings. Fig. 1 is a 
principle diagram of a virus checking network according to 

10 the present invention. 

[0014] The virus checking network 1 includes the virus 
checking units 10a to lOn, the client terminals 20a to 20m, 
and the virus information control base 30 to prevent 
intrusion of a virus by performing virus checking. 

15 [0015] The virus pattern storing means 11 stores a virus 
pattern. The virus checking means 12 performs virus- 
checking whether a packet is an infected packet Pa by a 
virus on the network side by comparing between the received 
packet and a stored virus pattern. 

20 [0016] When detecting the infected packet Pa, the packet 
transmitting means 13 sets a preset bit indicative of 
infection within the infected packet Pa and transmits it as 
an infection-indicated packet Pb. 

[0017] The infection packet detecting means 21 detects 
25 is as the infection-indicated packet Pb based on the bit of 
the infection-indicated packet Pb. The file executing 
control means 22 disables executing of a file corresponding 
to the infection-indicated packet Pb. 

[0018] The virus pattern information distributing means 
30 31 distributes the updated virus pattern information to the 
virus checking units 10a to lOn by multicasting. The 
distributed virus pattern is stored by the virus pattern 
storing means 11 . 

[0019] The virus pattern information managing means 32 



manages such as newly setting and updating of virus pattern 
information in an integrated fashion. The mode when the 
virus checking network 1 of the present invention is 
applied to a network on internet configured with routers, 
is explained below. The virus checking units 10a to lOn of 
the present invention are arranged in some of the routers 
to perform virus-checking on the network side. 
[0020] Hereinafter, the router in which the virus 
checking unit is arranged is referred to as a virus 
checking router. Fig. 2 is a schematic view of a network 
on which virus checking routers are arranged. The network 
1 includes routers Rl to R8, the client terminals 20a to 
20m, and the virus information control base 30. 
[0021] In the figure, the routers Rl, R2, R3, and R4 are 
the virus checking router, and the other routers only have 
a general router function. The virus information control 
base 30 is connected to the virus checking router R2 and 
the client terminals 20a to 20m are connected to the virus 
checking router R4 . 

[0022] The portions (heading portion, middle portion, 
tailing portion) of the virus to be checked are shared 
among the virus checking routers Rl to R4 that are arranged 
so as to allow passing through each checking at least once. 
[0023] Each of the virus checking routers Rl to R4 
receives a virus pattern VP distributed by multicasting 
from the virus information control base 30, and stores 
always updated virus information. 

[0024] The virus checking routers Rl to R4 compare the 
received packet with the stored virus pattern VP. If it is 
infected, a bit is set in the packet. 

[0025] Concurrently, the warning packet Pwl is returned 
to the source and the warning information packet Pw2 is 
distributed to each of the virus checking routers Rl to R4 
by multicasting. 



[0026] Each of the virus checking routers Rl to R4 that 
receives the warning information packet Pw2 performs 
priority detection of the virus or blocking the 
communication with the infection source. The client 
5 terminals 20a to 20m constantly monitor packets, and 

display a message to a user for alerting deletion of the 
received file when a bit indicative of infection is set or 
a packet is the warning packet Pwl . 

10 [0059] Next, the warning packet Pwl is explained. When 
the virus checking router detects a virus, the warning 
packet Pwl is sent to the source and the warning 
information packet Pw2 is sent to the peripheral virus 
checking routers by multicasting, thereby enabling the 

15 early finding of a virus and preventing the spreading 
thereof, 

[0060] The warning packet Pwl is set with a bit in the 
option area of the IP header similarly to the packet at the 
time of detecting a virus, to be distributed to the source 

20 in the following format. Fig. 12 is a diagram illustrating 
a format of the warning packet Pwl. First, the IHL field 
is incremented by one. Then, the option area is set as The 
Copied flag=zero, The option Classes=three (area for future 
reservation) , The option Number=two (code indicative of the 

25 warning packet Pwl), length=three. Then, the option of the 
checking uncompleted/completed that is explained in Fig. 11 
is added. The end address is the address of the infection 
source . 

[0061] Next, processing on the client side is explained. 
30 Fig. 13 is a diagram illustrating a configuration of a 

client terminal 20. The infection packet detecting means 
21 of the present invention is included in a LAN driver 21a 
and the file executing control means 22 is included in a 
TCP/IP driver 22b. 



[0062] The LAN driver 21a views a virus checking bit of 
each packet transmitted for each flow, determines whether a 
bit is set, and notifies the result to the TCP/IP driver 
22b. 

5 [0063] Upon receipt of notification that a bit is set, 
the TCP/IP driver 22b disables the execution of the 
corresponding file, and then displays a message 20-1 
indicative of deleting the file. 

[0064] Next, the flow of monitoring a bit at the client 
10 terminal 20 is explained. Fig. 14 and Fig. 15 are 

flowcharts illustrating processing of monitoring a bit at 
the client terminal 20. 

(550) Read a packet. 

(551) Determine whether it is a new flow. If it is a new 
15 flow, proceed to Step S52. If not, proceed to Step S53. 

(552) Add flow information. 

(553) Determine whether it is end of the flow. If it is . 
the end of the flow, proceed to Step S54. If not, proceed 
to Step S55. 

20 (S54) Delete the flow from the flow information. 

(555) Check the bit. 

(556) Determine whether being hit. In case of being hit, 
proceed to Step S58. If not, proceed to Step S57 . 

(557) Hand over the processing to the TCP/IP driver 22b. 
25 (S58) Determine whether it is the warning packet Pwl. In 

case of the warning packet, proceed to Step S59. If not, 
proceed to Step S60. 

(559) Display a message indicative of warning. 

(560) Nullify execution authority of the file. 
30 (S61) Display the warning message 20-1. 



[Brief description of the drawings] 

[Fig. .1] A principle diagram of a virus checking network 
according to the present invention. 



[Fig. 2] A schematic view of a network on which virus 
checking routers are arranged. 



[Description of the numerals] 
5 1 virus checking network 

lOa-lOn virus checking units 

11 virus pattern storing means 

12 virus checking means 

13 packet transmitting means 
10 20a-20m client terminals 

21 infection packet detecting means 

22 file executing control means 

30 virus information control base 

31 virus pattern information distributing means 
15 32 virus pattern information managing means 

Pa infected packet 
Pb infection-indicated packet 
VP virus pattern 
Pwl warning packet 
20 Pw2 warning information packet 
R1-R4 virus checking routers 

R5-R8 routers 
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IS 1 2) t7h L/cJg^l±Xr'y7*S 1 3^, 
ftttnt±"Xx-v7S 1 4A.fr < 0 30 

cs 1 3) %<D%n + ixmmiiimts, 
[s 1 4] sfciaitrf 5„ 

[S 1 5] &<D&!mtiLZ±.ki>r>T<>Z>o 

[0040] &mwik£?%.mmuT:\ 
[0041] mfc*vm<D;ty-vhit, *^o-f 

;1/Xfx7^¥gl 2(cfS^f37f ^Xf-x-y^i' 40 

7>*x.v91tfT5'<.Zrt*y htti r-©fp#tfT 
CPfrof tp, http, smit p©t^Tn^«^^ 
7 hT\ ^oS/cfx7^^7LTV^jlv^ 7 FT 

[0 0 4 2] fcTEU *ftWK0><4r*yMi, 
©/ci67Y^X^x-y^7^/V£ 1 2£7^X^x-y 



1 1-16 7 4 8 7 
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[0 0 4 3] -H s 7;^XFO/^7m, >"J 

7;l/#^fifBi i bT-7^;f/X/^-y©l«a 

tffrt>n, ^r-7;n i aicmm^mm^m 

[0 0 4 4] ^LT, MtlfE^l 3 aTMff^L 
/^yh£j£2H§SBi 3bt±, 7-f/bX^x>y7 

■y hPb££jj£-f3 a JWKO|W|-©7n-<D^'!r«y h tC 
JtLTt.tr >y h£iT3 0 

[0 0 4 5]^:, ^y h^^fl^l 3 Mi, IP 

*>rv Y(DmmicmzW^^y b Pw l ££$t 
§0 Wkmn^v b P b, Sf^^-y fPw 

[0 0 4 6] ft&\ SjfrE-FfcfSStLT, mjtt<0 

mmmzxi&z- mm® 1 4 tot^tt^ 

t«. ^7>C7>hS*2 0Tt±, 77F7x7 

tC J; o T I P a >y ^£D 7 4 ;W*«Sfe&*t tf y h 
LTl^o tl-y htfiofcJSSSSgV^-y h P b&tfllt 

hPw l^tt©-p/c^7^7>'hS*2 0 
It, n— »ftjktLT7f ^XfcJSaftLftgO^-y-b-^ 

[0 0 4 7] &fc I PA-y^"<7)^tCOV^T^t5 0 
H8ttl PA 7 ^®^)t^T0TS§o ^-S?3>li 
4 try hT\ jy*f-*»J Y^v?om£&7F.t 0 I H 
L (Internet Header Length) &4tl>y hT\ '"vy^H 
#3 2^7 h7-KmfeT^$tlSo +r-l£X^7« 
8 t* -y FT\ X;V-7>y h^©+r-lfX,Sgjb^i*tl 
So 1 6 tT v b T\ * 7 r *y F f-fiTia -3 

[0048] mmmtt 16^ ht% jMfiij^nsyT 

§fc46tcfiji3^Ten/cfBTx-^y5A«7-5^><y 
h^ffl^iT§^t^ffl$n5 D Flagti 3 tT'y HT\ 7 

^^/y hco»iMSftt±m^©»§^t- 0 79 

y h * 7-12 -y Mi 1 3 t* 7 h T\ r-^y-'y^f 
[0 0 4 9] t t Ui81f>y 

g^iSt^t b ^yx,t°- h L^-V7p h n;l/*^f 0 
A-y^x«y^1fAt± 1 6ld'-y ht'A-v ^fcJtl-Sf-x 
•y^^A^To 

[0 0 5 0] Jfi^r K UXt± 3 2 If -y h T\ S&j^© I P 
7 F UX^to »jS7 F LX& 3 2 tf >y b I 

LT^^^-y b P b_ S^/^-y h P w 1 Rtf 
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[S 2 0] ?T*lZ%\<Dy-<frXl L 3LV?n>-?T°J-xv 

t m& e o i?m m? § „ m% e. xt y y 

S3 0^ ^T&^ita&XxyT'S 2 l'\fr< 0 
[S 2 l } *7^y Flitf-£lx±fr£5fr*WBff-f 

So -^m^f^xTyT's 3o^v ^a-eaitn 

tfXryXS 2 < 0 

[S 2 2] TC P>*5r? hWOh ttp, ftp, s 
m t pO^-fnfrO^^ry h^if^jb^jBf-rSo 10 
t§£tiXry7S 2 3^V *5 WttUfXryT'S 3 

[S2 3] fcfc, I¥«Ki01 

0?«T£o 

CS2 4] ^fttT^SA^5A^"J»fra 0 
^5S^I±7f7^S 2 S'v, ^T'&ttnifXxyv'' 
S 2 S'Vff < 0 

[S2 5] 

(S2 6) ^7frif5fr£«f §<, ^7«i§£«XT 
y7S 2 7^, *5T?fttfhtfXrf^S 2 3^5, 20 
[S2 7) fx7^^e7h^it5 0 
[S 2 8] I P^y^^T^a^X^-^FtCtfy h 

[S2 9] Iflf^vbPwl, »«1««/<y>yhPw 

2 5. 
CS3 0] MlW-^fr^c 

[0 0 5 2] #[C±fBCiXTyXS 2 3<7j7^VI/X^x 

So 

[0 0 5 3] &Limi£e&<&o£6^y F<D# 

^ /bXtllL/: i: HP^v $f TV 3 ><07 
^->bFOtfy b£iATS 0 

[0 0 5 4] fe L^CD^fp^v^y FtfB7L 

M£fi^LT^§7^X^xy7/l;-?[c3;;^:S 0 40 
0 1 0 ti 7 ^ ;UX^x y * ;l/-r y > ojOS^ HfcSf 

[S 4 0] Ffr5> 1 h£ffif9(JHTo 
(S4 1) /tfry h^Tfr^frfcWShrSo ^yb 
£7©Jf£tttl7U ^-e&tfftffXryT'S 4 2^\ 

[S4 2] ^Y/I/^^-^n^filfcifcKt*,. 
[S4 3) fc'yhLfcjtr£3fr£f«*rtS 0 fc-yhLfc 
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[ s 4 4 3 fm* 1 WkMto 

ts 4 5] ii^isfi^m. 

(S 4 6) Pll*n+l35?fc1-5«, 

[S 4 7) 7^/bX?-xy^7*PH^£«&TS 0 
^TOfl^ttXf 4 9^. ^T'fcltftfcfXx-y 
7"S 4 8'\fj< 0 

[S4 8] InTltlMf-x-^t^ 

TS4 9) 7Y^X^fcW»Tf§o 

[0 0 5 5] ^c7^;bX^x-y7B#^TiT5l:y btr 
-31 ^TIK^-r §o 7 -f ;bxf- x y £ )V~ $ T* 7 -f frTsl- 

[0 0 5 6] gl l l ti,<Ml7^-y b P btD I P^ 
•y F<D7*-Vy F£*tiaT'£5 0 3:1% IHL7Y 
-;l/K£liiinrfS. ^LT, *7v3>£»The Co 
piedflag=0 , The option Classes=3 ($*©7^fflM 
m v The option Number^ (Iit^7hPb : 
^Vy^xy^fcLfecfcfc^tn-F) . Length 

[0 0 5 7] Option Valued LTH 1 £y Mi^ 
1 ««*x 7 7*/?f , 8 2 If y M43S 2 Pl^x y 7 

[0 0 5 8] £LT, SfMEy bt±7^X:fei&/!i 

T, Sgfe&jjWy bPb^ST* fcfe, SSSlfyhtt 

[0 0 5 9] mcm^^y bPwl tC^Tii^T 
§ 0 7-nWX^xy?;I/-2T*^;l/X£fc&Lrdlg£ 
iMfg^cttBS^yy hPw l MfU JMB<97^ 

^YXhT-MfftSo ^ntj;oT7^;VXff)¥^fg 

[0 0 6 0] SS^'vhPwKi, 7^;bx^W© 
^^-yFfcllt I P-A>y^tD^7->H>nlM«t!-y h 

1 Zttf&/^hPwl07*-V7 b^-TETfe 
§ Q ST, IHL7^-;I/F*lifl]Dt5 0 ^LT, * 
T'v'a^^The Copied flag=0 , The option Class 
es=3 m%<D j m%ffl&) , The option Number=2 (1 
^^•y b Pw 1 i&^-r^-F) , Length=3 t^-f 

Xt4S 0 

[00 6 1] :^(c^v7r>F(PJjcDMi:o^TI?i0M 

So hi 3&t747>vmizo<omf8.z&tmT-& 
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2 b^#^ft§ 0 
[0 0 6 2] LANF*7lW 1 a ti, ^£>nT<3& 

7xi-\z-d^t, &*>rv F©7>r;FX^x*.y£tf<y h 

U *©J|g££TCP/I P F7-r^2 2 bKilftrf 
5o 

[0 0 6 3] TCP/ I PF5^2 2bt±, ^vhM 

WKLfcft, 777;I/£i»t£^^y-t!-^2 0 
- 1 fcgijVf £„ 

[0 0 6 4] Wc.ZyJTyVmiZ 0?<D\£v h^l 
[S 5 0] /^7'y F£M&iAfr 0 

cs 5 n ^myv-frEofrmmtZo mm? 

7S 5 3^tT< 0 

[S 5 2] 70-flH8*illlPTS. 

(S5 3) M77u-^5fr£*iJ!fhri.o 3s*77p- 
(Dii^{i7>r>y7S 5 ^T&ttntfXr^S 

5 5^f< 0 

[S5 4] 7n-flBB3tp5Sa7D-*fiiJI8ir«. 
[S5 5] eyhWxy^n. 
[S5 6] fcvFLftfrHSfrfcWW'rS. t-yhLft 
i§£(iXr-y7S 5 8^\, ^-£&tffttfXr-y7S 5 

[S5 7] TCP/ I P F5-Y/S2 2 btcMS^S^o 
[S 5 8} h P w I frHSavfcflJBrfSa » 

£/^r.y F^^t±7r'y7S 5 9^, ^5T?4lttitf 

Xf7ys 6 O^fi <o 
[S 5 9) SS^tO^y-fe-^fc^TSc 
[S 6 0] 77^KD^Tffi«4<To 
[S6l] 0- l (Dg^trd. 

[0065] Mcmmmw^'y bPv/zicD^xmm 
mm>*>r 7hpw2 z&t, mmm* ? f p w 2 

ti 7 Y ;WX/^ 7 F © -> U 7rt« £ iMfH7t; I P 7 F U 
[0 0 6 6] S$1i$g^yFPw2£gttffi^;fc&<> 

«$1ffl^-y FPw2CQ7*-^y h*sta-ea5 

§ 0 »$'Hf£g/^r>y FPw2t±, 'Vy$fPw2-lfcEt 
her HeddertIP Hedder (Multicast) fc£&O 0 
[0 0 6 7] ^LT, W?S1fl8^t3-FPw2-2 
fc, 7^;i/X<7)Sii^-r>'U7;i/S^Pw2-3i:, 
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fc, 7-Y;FX,TOt<Dl P7FbXPw2-6£ott 

So 

[0 0 6 8] ^ci^fi&W-y h P w 2 fcgttlRofc 

( s 7 0 ) tf$ffi$@;^ -y F P w 2 i/ U 7;F§^£ 

CS 7 1] mi I2«i, -S&n&PgJi, © 

10 tt*iitt*fi±fflfc:±tf3o 

[0069] ^tggfesfcoiHsaiBf^fTaftfeosjs 

^;F-*ijT**X F fcoilffifc -JOTM^S, 
[0 0 7 0] t^'ifS/^-y FPw2tD^^#SU^;l/ 
£MT, £3-£fcU:0Ji£li I P7F*UX£r-7/U 

tfii#u aa^KtcSfftSo t^-FT-tiii^ 

57FU7^6^^-y Ft, r-7;Wcfc£7Fb 
20 Xl^^^y Ft, fc-JgHffffltfttt"^^* 

So 

[0071] rtate-eaufiBitt. nmmtf*-(i±7V 

:/*/M£fcl8£Sft5o tbco^lfflrttc^v Ftf 
S 0 aat'^v Ftf*fc5B#lffl (A7y^©A7VF 

[ 0 0 7 2 ] gl 1 8 IJSS*- KS^S 1 4 tfff 9 S 
$^-F©Ma«&SVf7o-^-y-F?£3o 
30 (S8 0) #SL-^;Wi-m±^ta^^WBrt§o 
-^W±Ottm±, Xr>y7S8 l'v ^?-cwn«" 
Xr-y7S 8 9-\|t<o 

(S81) P7FUX£{£f#-fS»tU P7KU 

Xr— 7;F[l I P7FbXt, SS^E- Ftc LT*K B# 
r^*7yFTS^7>^fili:, £i££tS 0 

(S 8 2] /^y F*^*aty 0 

[S 8 3] fe£/$?£c07 FbX^r-7;Ft-g(T§ 
frH5fr£fiJ®rT 5 D «§^l±Xr-y7S 8 4 
'V ^9 WtntfXr-y7S 8 6^ff <□ 
40 [S8 4] /^yF*«gfc-rSo 

CSS 5] *7y^fB^^St5 D T&=b*>, 

cs8 6] **?y*mffl>?%* t&t>%, wm- 
cs8 7) %5y?zmj?zfr£?&%*pmt&o & 

7S 8 2^\M^o 

[S 8 8) B£I P7Fl^Xr-7;U^e» I P7FbX 



(8) 



13 



[0 0 7 3] *t^-f;l/Xf-i^^;W-^©ttWtJ:« 

m^Rtf?±y*mfo±£-ovximtZa 7^ 

7^x^x>y^;i/-£££fiMiTS7^l'X^£-y 

[0074] cntc^D, M&zmmz-mfcWv 

tc&§ 0 10 
[0 0 7 5] 7^/FX? L x7^l'-*{Cj[tf&7YA/X 

T^tiT^TOPitf -y * ^tiS <fc 5 

[0 0 7 6] ^(^SKlTlS^tSli^^-D^Tl^l- 
5o 01 9«BS«M^^'V h<D7t-7y h 
§^tBlT?S5o 0tcSf7t-V7 F£ffl^Tg«IS 20 

[0 0 7 7] £T\ %iM<DVj)lx?x.vin\<-$m 

^mmmm^-y v i o o^s^ato^i^^^t 

[0 0 7 8] Sfc, g^^b-T^y^tf^^S 

ALT, »jS7 FUXfcffALfc/^y h*«ff*r5. 
*7->3>^l±. The Copied flag=0 , The option C 30 
lasses=3 , The option Number=3 

<m%ttmmmKovry f i o o^t^- f) , l 

ength=3 . T^f j ZWfetZo 

[0079] cmmmm^^y f 1 o o^§ 

tf® o 7 ^ ;FX ^ x y ? # ti, ^MtcIc ft L T 

H01 ^-ST^TSo 0 2 0&?I^}«$gj£ 
jSg/Vr>y HOI ©7*-V-y h^t^T'^S. 

[0080] 1 1 imm^x^rai. mt^m 
-3 tc 7 ;ux^ x v v ji>- $ zmvmmT- 1 § igh ©h> 40 

s^g^js^^-y hoi 0*7*^3 ymmt. a 

e Copied flag=0 , The option Classes=3 ($5f5©-p#J 
fflfSM) , The option Number=4 (ffilyj-jgSHs^fS 
1 *^-T3- F) . Length=3 , m% 

[0 0 8 1] $fc, ^fffflfJ^7^^X^x'y^;l/-^ 



SfPff^F 1 1 - 1 6 7 4 8 7 



[0 0 8 2] SLtmffiLrc&viC 

i7n-yf7-^ 1 (4, 7-r;t/Xf-x>v7;V-^(c7 
^ ;I/X^x -y d i: fc: «fc 9 , *-yF7 

-7«T*7^bx£$ft£tf£oi;tfTt, 7^;bx{S 

[0 0 8 3] Sfc, fgKftSrO^l/X'^-^lffg* 

£ ^Ft^ x h tc «fc <y Si! 

[0084] zzic mhtzu &7,\zmmm 

[0 0 8 5] §7^;VX^x-y^;V-^T'7^;I/ 
raic$fc*^T7^;i/X^#fi1-5if^tfcv^Ttv>f 

ftfr fcffi 1J 1 LT^ 5 7 ^ ;FXf- x -y * A— * >y 2 
fScttf-p*, 7-^X^xy7©ft£^±'f3o 
[0 0 8 6] 9^;l/X^2tif:/^-y h^: 

W^iiSit set T-#jM& ^'fc J: 5^ft-ft h7t7^C 
[0 0 8 7] 

[^«a^] W±Uifflt/c:J;9K, *MW<07-r;VX 

^ x 7 ^ * -y F 7 - ? ti , Igft© 7 ^ ;VX 7 1 x -y ^7 gsl 
*^ltT, ^>y b7-^U"?7^;I/X^x-y^^T^^ 
fi!ti:Lft 0 cntc^O, *«y h7-^IJT'7-r;l/X^* 
MtcRS <* C T* t S ©T% 7 ^ ^XOgJfeRt/teTv* 
KpihTt, 7^;bX-3 1 x'y^tM^O^I±^05^^ 

[01] ^m<D^^)lX9x'y^^y bV-?<DWM 
[02] 7^X^x7 7;l/-5?£SdlLfc*'y b7- 
[03] 7^iU^->VP©7*-?7 h£7j^0 
[04] 7Y;FX/^-yVP^#IS^ttff^^ 
[0 5] 7^;l/X;^->te*fl¥IST<D7^l/X^- 
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[06] mnmmttmLx, mitK&&ftm&j& > 

So 

[09] 9 -y )\>7.j- i -y * ojaa^ mzft? 

[010] 7Y;l/X9 L x-y^;b-r-i'>'OMa^li^ 

[01 1 ] ^^jV^y h<Dl VWv h<D7t-^ 10 

>y h&**BTffc«„ 

[012] t^^y F<D7*-V>y l-fc^-f 0T?fc 

[01 3] ^^^7>ha*«it^s-r0TSSo 

[014] 25Y7>hSfc*©t^gffi0&3^H* 

[015] ?^7yh^oti7 hg^ma#II^ 

[01 6] ««f^/^-y h<D7*-V>v h^-r^ll? 
fe§ 0 20 
[01 7] TO1IW^^vh*atJiRoftl8o«as)BS* 



^¥ 1 1 - 1 6 7 4 8 7 
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£D®IS?Ji?:^t0T-S§o 
[018] «£*-K©«!S¥0£^r7n-*ir-h 

[019] fiSftS^g*/^'? h©7^-'77 h£ 

[02 0] fi^Mtg*E^^y f«7*-V7 

i ^Y^i7^^h7-i' 

I0a~l0n 7<^f-x-^Si 
1 1 7-frt^<*->lfttt^& 

12 7^X?-x7^K 

13 /Vr-y h^H^fS 
20a~20m ? 7 J T y V t$HM 

21 

22 774h%m\wm 

3 0 

3i 7 y ^ - yffifTOfi^ a 

3 2 ^;l/X^*-yllf$BWffl¥l& 

Pa il/^7h 

Pb &8&mrt'ryh 




(11) 
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[05] 




[08] 



III 


Ill 

IHL 


lllllll 


lllllllllllllll 




Flag 77y>yt*7fesh 










»£r Kb?: 






MMBHj|BB 



3 1 5] 




[016] 



PW2-2 PW2-3 PW2-4 v PW2-5 



(14) 



nmW- 1 1 - 1 6 7 4 8 7 



100 aa^«««3E*/«r„ h 




[02 0] 

Flag 77^>f*7tj| 



I 



[o I t l|o 0 1 0 l[0 D 0 0 0 0 1 l| 

LL- fete, = 4 L ^h.j 
Classss= 3 



